Netwrix Directory Manager Hard-Coded Password Vulnerability

A hard-coded password vulnerability has been identified in Netwrix Directory Manager versions 11.0.0.0 and prior to 11.1.25134.03. This vulnerability allows authentication as an administrator, potentially compromising Netwrix Directory Manager and any integrated Identity Stores.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative access in Netwrix Directory Manager, allowing for a compromise of the application and its integrated Identity Stores.

Remediation

Netwrix has released a patch for this vulnerability in version 11.1.25134.03. This update is available through the Netwrix Customer Portal. After applying the update, customers are advised to rotate the credentials for all configured Identity Stores.